Route Origin Authorization
$ rpki-client -vvf rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212789.roa
File: AS212789.roa (raw, json)
Hash identifier: L4AfCZklxVv4bOGNaDzr31KRk9Y5jc7wHd+TUBUlHfY=
Subject key identifier: D6:E1:CC:7E:6F:39:78:32:51:3F:68:0E:DD:72:F7:8B:68:DD:3A:D0
Certificate issuer: /CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Certificate serial: 7797A78560E6615EF8DFC40EC5CF0604A7D3AA36
Authority key identifier: AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject info access: rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212789.roa
Signing time: Wed 21 Dec 2022 16:56:54 +0000
ROA not before: Wed 21 Dec 2022 16:51:54 +0000
ROA not after: Wed 20 Dec 2023 16:56:54 +0000
asID: 212789
IP address blocks: 2a06:a005:1ca0::/44 maxlen: 48
2a06:a005:1cb0::/44 maxlen: 48
2a06:a005:1cc0::/44 maxlen: 48
2a06:a005:1cd0::/44 maxlen: 48
2a06:a005:1ce0::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:97:a7:85:60:e6:61:5e:f8:df:c4:0e:c5:cf:06:04:a7:d3:aa:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abdbfabaf201e2bb85b9edb4d643594ac30bbfe2
Validity
Not Before: Dec 21 16:51:54 2022 GMT
Not After : Dec 20 16:56:54 2023 GMT
Subject: CN=D6E1CC7E6F397832513F680EDD72F78B68DD3AD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d6:76:76:90:d4:ff:7c:a4:58:89:b0:14:f5:
39:82:25:1f:b5:9a:b5:85:62:65:8b:32:77:85:7f:
ee:a9:2d:08:cc:59:e0:c9:a3:e2:17:58:b8:15:61:
1c:a1:cf:c0:cf:2c:f8:6f:37:45:91:c9:46:e9:66:
ec:79:ef:21:4c:3e:d7:8c:01:7d:1d:24:5b:d5:53:
c4:6f:75:53:3c:f8:ab:05:c4:79:c1:2a:fe:35:3a:
f0:2f:47:c2:3f:37:fc:32:85:df:d5:89:16:d2:d7:
ef:f1:c0:a8:9c:89:4f:fa:2e:12:64:23:32:66:b0:
63:e4:ee:fc:2d:57:25:ef:d9:ea:2b:be:c1:d7:0d:
f0:9a:ce:22:b0:2f:c2:c2:06:d1:79:aa:10:6b:ca:
96:06:aa:ec:b7:0d:74:69:89:63:ef:37:55:4c:54:
8c:f5:73:b3:5f:e6:18:77:20:34:67:99:72:b2:24:
eb:ef:4a:62:74:aa:fd:14:12:3e:15:48:79:8a:04:
cc:c5:85:61:f9:f2:94:35:0d:e2:8c:d0:c2:08:f3:
35:88:57:bd:aa:a8:cf:17:63:af:aa:81:ee:a9:b4:
4f:d2:31:1a:20:d3:78:18:49:93:22:1e:39:bd:8c:
7b:0d:fd:0c:46:be:80:8a:61:29:ca:7a:0a:91:f9:
ac:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E1:CC:7E:6F:39:78:32:51:3F:68:0E:DD:72:F7:8B:68:DD:3A:D0
X509v3 Authority Key Identifier:
keyid:AB:DB:FA:BA:F2:01:E2:BB:85:B9:ED:B4:D6:43:59:4A:C3:0B:BF:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/ABDBFABAF201E2BB85B9EDB4D643594AC30BBFE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9v6uvIB4ruFue201kNZSsMLv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.zappiehost.com/repo/ZAPPIE-RPKI/2/AS212789.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:1ca0::-2a06:a005:1cef:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a3:7a:4f:3a:39:b0:46:ad:28:16:92:f4:95:0b:a8:b4:8d:87:
bb:66:bc:e4:39:d9:a8:04:c4:1b:44:0d:66:2f:fb:3e:67:bb:
14:b3:5d:04:f5:8e:d7:43:54:8a:54:44:3f:af:9b:9f:18:c4:
29:6f:4d:07:24:aa:99:d3:10:b5:39:2a:9a:e7:51:6e:83:57:
ba:31:f7:ba:2f:c9:57:52:4e:a5:bc:5d:0f:d0:7c:30:7b:2b:
39:ee:79:3a:16:2f:5d:a1:09:24:e0:9a:bb:7a:d4:db:b8:a2:
a2:01:55:71:c0:8e:0a:fc:27:32:ee:52:9c:8c:b5:e3:ed:2d:
45:68:fd:33:51:43:e8:a6:b4:ed:bc:d4:25:9c:a8:f0:e0:0c:
17:77:da:78:c8:fd:2a:49:7e:ed:39:5b:19:b0:d1:31:d6:67:
23:86:33:7b:78:65:90:c5:f0:84:b0:8a:cc:43:38:91:37:d4:
06:cb:73:17:b6:e7:98:ed:b1:4f:06:85:ad:45:57:a5:25:27:
05:a6:c9:87:08:21:a8:d8:e5:3d:5d:2a:62:70:6a:e6:e2:ae:
ab:41:aa:fa:50:71:45:97:36:c1:09:f9:0b:23:62:0b:b5:6a:
4a:01:b1:7a:f3:e8:2d:d5:67:bd:50:1c:0c:dd:b4:b2:d3:08:
78:2e:aa:98
-----BEGIN CERTIFICATE-----
MIIEwDCCA6igAwIBAgIUd5enhWDmYV7438QOxc8GBKfTqjYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWJkYmZhYmFmMjAxZTJiYjg1YjllZGI0ZDY0MzU5NGFj
MzBiYmZlMjAeFw0yMjEyMjExNjUxNTRaFw0yMzEyMjAxNjU2NTRaMDMxMTAvBgNV
BAMTKEQ2RTFDQzdFNkYzOTc4MzI1MTNGNjgwRURENzJGNzhCNjhERDNBRDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC71nZ2kNT/fKRYibAU9TmCJR+1
mrWFYmWLMneFf+6pLQjMWeDJo+IXWLgVYRyhz8DPLPhvN0WRyUbpZux57yFMPteM
AX0dJFvVU8RvdVM8+KsFxHnBKv41OvAvR8I/N/wyhd/ViRbS1+/xwKiciU/6LhJk
IzJmsGPk7vwtVyXv2eorvsHXDfCaziKwL8LCBtF5qhBrypYGquy3DXRpiWPvN1VM
VIz1c7Nf5hh3IDRnmXKyJOvvSmJ0qv0UEj4VSHmKBMzFhWH58pQ1DeKM0MII8zWI
V72qqM8XY6+qge6ptE/SMRog03gYSZMiHjm9jHsN/QxGvoCKYSnKegqR+aw1AgMB
AAGjggHKMIIBxjAdBgNVHQ4EFgQU1uHMfm85eDJRP2gO3XL3i2jdOtAwHwYDVR0j
BBgwFoAUq9v6uvIB4ruFue201kNZSsMLv+IwDgYDVR0PAQH/BAQDAgeAMGwGA1Ud
HwRlMGMwYaBfoF2GW3JzeW5jOi8vcnBraS56YXBwaWVob3N0LmNvbS9yZXBvL1pB
UFBJRS1SUEtJLzIvQUJEQkZBQkFGMjAxRTJCQjg1QjlFREI0RDY0MzU5NEFDMzBC
QkZFMi5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3E5djZ1dklCNHJ1RnVlMjAx
a05aU3NNTHYtSS5jZXIwVwYIKwYBBQUHAQsESzBJMEcGCCsGAQUFBzALhjtyc3lu
YzovL3Jwa2kuemFwcGllaG9zdC5jb20vcmVwby9aQVBQSUUtUlBLSS8yL0FTMjEy
Nzg5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/
BB4wHDAaBAIAAjAUMBIDBwUqBqAFHKADBwQqBqAFHOAwDQYJKoZIhvcNAQELBQAD
ggEBAKN6Tzo5sEatKBaS9JULqLSNh7tmvOQ52agExBtEDWYv+z5nuxSzXQT1jtdD
VIpURD+vm58YxClvTQckqpnTELU5KprnUW6DV7ox97ovyVdSTqW8XQ/QfDB7Kznu
eToWL12hCSTgmrt61Nu4oqIBVXHAjgr8JzLuUpyMtePtLUVo/TNRQ+imtO281CWc
qPDgDBd32njI/SpJfu05Wxmw0THWZyOGM3t4ZZDF8ISwisxDOJE31AbLcxe255jt
sU8Gha1FV6UlJwWmyYcIIajY5T1dKmJwaubirqtBqvpQcUWXNsEJ+QsjYgu1akoB
sXrz6C3VZ71QHAzdtLLTCHguqpg=
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:17:22 2025 by rpki-client